Guides
POPIA, explained for the businesses that have to comply.
Every guide cites the sections of the Act it relies on, and is written for an owner rather than a lawyer.
-
Data breach under POPIA: section 22 notification explained
What POPIA section 22 requires after a data breach: who to notify, the real deadline, what the notice must contain, and when notification can wait.
-
How to register with the Information Regulator (step by step)
How to register your Information Officer on the Information Regulator's eServices portal: the details you need, the steps, and why it comes first.
-
Data subject requests under POPIA: rules, deadlines, how to respond
The rules and deadlines for POPIA data subject requests: access, correction, deletion and objection, the prescribed forms, and how to respond in time.
-
How to appoint an Information Officer under POPIA (step by step)
The head of your organisation is the Information Officer by default. How to confirm the role, delegate to a deputy, and record the appointment in writing.
-
What your privacy policy must include under POPIA (with template)
The clauses a POPIA privacy policy must contain, mapped from section 18 and the eight conditions, with the most-missed items and a template to start from.
-
Does POPIA apply to my small business? Who must comply
POPIA applies to virtually every South African business, including sole proprietors and NPOs. Who must comply, and the narrow exclusions that almost never help.
-
POPIA compliance checklist for small businesses (2026)
The seven steps to POPIA compliance for South African small businesses: Information Officer, privacy policy, PAIA manual, consent, DSRs and breach plan.
-
POPIA data breach notification: what you must do
Your obligations when a data breach occurs - who to notify, when, and how to handle it properly.
-
Managing data subject requests: a practical guide
How to handle DSRs properly - from receiving requests to responding within the 30-day deadline.
-
How to appoint an Information Officer under POPIA Section 55
Step-by-step guide to appointing and registering your Information Officer with the Information Regulator.
-
What is POPIA? A complete guide for South African businesses
Everything you need to know about the Protection of Personal Information Act and how it affects your business.
POPIAdesk is not open yet
The product drafts the documents and tracks the deadlines this guide describes. The assessment is open now and takes about ten minutes.